Immutable Snapshots

overview i i mmutable snapshots cannot be deleted for 7 days even in emergencies this means if your storage becomes over subscribed you can't immediately free space by deleting these snapshots there is no emergency override for administrators or korgrid support before enabling, ensure storage utilization is below 70% you understand your snapshot retention will consume x gb over 7 days korgrid reccommends use immutable snapshots only for short retention periods an immutable snapshot is a powerful safeguard feature designed to prevent tampering or deletion of saved data, even by administrators or automated processes the immutable option provides a safety net against accidental or malicious erasure, ensuring that a snapshot remains available when needed for data recovery when a snapshot is marked as immutable, deletion is blocked for all users, including administrators and root users this effectively locks the snapshot until it expires, or the immutable flag is removed with a 7 day mandatory waiting period ransomware protection ransomware actors commonly delete all available snapshots to eliminate recovery options, forcing victims to pay the ransom immutable snapshots provide critical protection by preventing immediate deletion of secured snapshots giving system administrators time to detect malicious activity ensuring recovery options remain available during an attack maintaining data protection even with compromised administrator accounts best practices critical considerations plan for storage capacity carefully, as immutable snapshots cannot be deleted immediately to reclaim space ensure you have an adequate storage buffer to account for the seven day unlock delay if approaching storage limits, remember that clearing space through snapshot deletion requires advance planning security recommendations restrict snapshot access to only users who need it and understand the implications ensure users with snapshot access are trusted and properly trained implement proper role based access controls best practices avoid operating too close to storage capacity limits where undeletable snapshots could cause issues plan snapshot retention policies with the seven day unlock delay in mind consider storage growth and capacity planning as part of your backup strategy managing immutable snapshots enabling protection these instructions are used to configure a single snapshot as immutable from the top menu , click system > system snapshots select the desired snapshot from the left menu , click edit toggle the immutable option to enabled click submit after toggleing a snapshot to be immutable the snapshot will display a lock icon to indicate immutable protection is now active automating protection to automatically enable immutable protection you can configure the profile used for taking system snapshots to automatically enable the immutable flag as snapshots as created from the top menu , click system > snapshot profiles select the desired snapshot profile from the left menu , click view from the left menu , click profile periods select the desired profile period from the left menu , click edit toggle the immutable option to enabled click submit the modified profile period will now display a checkmark in the immutable column and any snapshots created with this profile will automatically be marked as immutable repeat this process for each profile period where automatic immutable snapshots are desired disabling protection from the top menu , click system > system snapshots select the desired snapshot from the left menu , click edit toggle the immutable option to disabled click submit note the snapshot will remain protected and undeletable for 7 days from the unlock request or the snapshots natural expiration date, whichever comes first the snapshots original expiration date always takes precedence over the 7 day unlock period when you request an unlock if expiration < 7 days snapshot deletes at expiration if expiration > 7 days snapshot deletes after 7 day unlock period if expiration = never snapshot deletes after 7 day unlock period